Release date:
2026-11-10 12:56:23 UTC
Description:
* SECURITY UPDATE: reject embedded null characters in the host and port
arguments of socket.getaddrinfo()
- debian/patches/CVE-2026-116566.patch: track the byte length of the host
and port arguments in Modules/socketmodule.c and raise ValueError when
a NUL byte truncates them
- CVE-2026-116566
Updated packages:
-
alt-python27_2.7.18-36_amd64.deb
sha:db292b9079ff10746815159b0abf06077cad56fb
-
alt-python27-debug_2.7.18-36_amd64.deb
sha:5c6e5435eef2ee67bd35819b67bf79b0988059e5
-
alt-python27-devel_2.7.18-36_amd64.deb
sha:81174f5254b02610f44d2d466b9f8af947952056
-
alt-python27-idle_2.7.18-36_amd64.deb
sha:0d9e925292f7144ccb1f1dd38380c9a7d4814752
-
alt-python27-libs_2.7.18-36_amd64.deb
sha:e6675b156e9ac868487343b845201862b57e5ab6
-
alt-python27-test_2.7.18-36_amd64.deb
sha:c3c0a8b0448cce1caf5b9be651366ae6f63cee4f
-
alt-python27-tkinter_2.7.18-36_amd64.deb
sha:18b423d85fe202da890f56d77c5b697e9645eda1
-
alt-python27-tools_2.7.18-36_amd64.deb
sha:175ec456578375fbc0c8a1e5459a52b28b7a9a78
-
alt-python27_2.7.18-36_arm64.deb
sha:2eb26f4b18aee451a233bb0eba7d958f3b80c93f
-
alt-python27-debug_2.7.18-36_arm64.deb
sha:a75a53f3b52f23bdef0c57faee779c7e79eb6bdf
-
alt-python27-devel_2.7.18-36_arm64.deb
sha:f61f9c4bd8ab1fcc7b747d435f7860b158420601
-
alt-python27-idle_2.7.18-36_arm64.deb
sha:2868461ca6c7f0a22b76f7e34a61cc423c1ff2eb
-
alt-python27-libs_2.7.18-36_arm64.deb
sha:86ac28c6670a1648ea9db45e601b825f74d48c20
-
alt-python27-test_2.7.18-36_arm64.deb
sha:133f4e663243ffcc2278cc99bf1ca79a477d4db1
-
alt-python27-tkinter_2.7.18-36_arm64.deb
sha:39cf36ff683854b2c38eed635d9ba587d15a28ef
-
alt-python27-tools_2.7.18-36_arm64.deb
sha:cf08662a19e5574e6c9549a927d2ab418a34baec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
